No more typing reviews! Try our Samantha, our new voice AI agent.

Check Point Cloud Firewall (formerly CloudGuard Network Security) vs Sangfor NGAF comparison

Why PeerSpot?
 

Comparison Buyer's Guide

Executive SummaryUpdated on Aug 13, 2026

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

Check Point Cloud Firewall ...
Ranking in Firewalls
8th
Average Rating
8.4
Reviews Sentiment
7.4
Number of Reviews
246
Ranking in other categories
Managed Security Services Providers (MSSP) (1st), Vulnerability Management (5th), Software Defined WAN (SD-WAN) Solutions (3rd), Cloud and Data Center Security (3rd), Container Security (6th), Cloud Workload Protection Platforms (CWPP) (5th), WAN Edge (3rd), Unified Threat Management (UTM) (4th), Cloud Security Posture Management (CSPM) (5th), Cloud-Native Application Protection Platforms (CNAPP) (4th), Data Security Posture Management (DSPM) (4th), Compliance Management (5th)
Sangfor NGAF
Ranking in Firewalls
32nd
Average Rating
8.0
Reviews Sentiment
6.5
Number of Reviews
34
Ranking in other categories
No ranking in other categories
 

Mindshare comparison

As of October 2026, in the Firewalls category, the mindshare of Check Point Cloud Firewall (formerly CloudGuard Network Security) is 2.8%, up from 0.7% compared to the previous year. The mindshare of Sangfor NGAF is 1.2%, up from 1.2% compared to the previous year. It is calculated based on PeerSpot user engagement data.
Firewalls Mindshare Distribution
ProductMindshare (%)
Check Point Cloud Firewall (formerly CloudGuard Network Security)2.8%
Sangfor NGAF1.2%
Other96.0%
Firewalls
 

Featured Reviews

Oscar Nunez - PeerSpot reviewer
Ingeniero en redes y Telecomunicaciones at K-IT
Centralized management has reduced policy time and provides reliable multitenant protection
What I would like, what I think they should improve a little is the management of objects at large scale. When you work with multiple domains, there are thousands of network objects. Detecting duplicates and consistency across domains is a very manual process that should be more automated. Another thing: the SmartConsole interface is very powerful and very good, but the learning curve, compared to other solutions in the market from other manufacturers, could be modernized. I think it does not necessarily have to be done from a client application; it could be done via web, because via web I know that not all the options you have in SmartConsole are available. So it would be good if it could also be done from the web and all the options were available. Another thing that I would really like is more automation with Ansible or Terraform. I know it has improved in recent versions, but I think it is still not mature enough. Compared to other manufacturers that do have a bit more in terms of automation capabilities in integration flows with Ansible or Terraform, Check Point Cloud Firewall (formerly CloudGuard Network Security) could improve. Another thing that could be improved a little would be the TAC response time, because when there are very complex cases, I think there should be more speed initially, more ownership of those urgent cases, and not leave the customer waiting. This has happened to me: when I have cases open with Check Point Cloud Firewall (formerly CloudGuard Network Security) TAC, sometimes they do not respond and I have to keep insisting, and I think that part should improve. I do not know if it depends on who takes the ticket or on the severity of the ticket, but sometimes I have had to insist a lot, and that would be the only problem. Once they attend to me and become involved in the case, the responses they give are very professional and really help directly resolve the problems when there is a bug or troubleshooting to do. As I said, I would like to see a specific improvement in SmartConsole. I think if they improved it—how to say it—gave it a facelift so you could access all the options directly from a browser, that would be great, because sometimes, for one reason or another, you cannot download SmartConsole or, for some reason, the SmartConsole client does not start correctly, and you could do it directly from the browser. I think that would be a good option to improve. Another thing would be that in multidomain environments, I would like a global search function for objects and rules. That is, you could enter and search across all domains at once, because right now you have to go domain by domain, and in environments with many customers, you spend quite a bit of time; you have to exit one domain and enter another. So those would be the improvements I would like to see.
AK
Network Administrator at GC University Lahore
Leverage detailed reporting for effective attack management
We are hosting applications over the platform, including websites and NAT traffic from our side. Because it's deployed in our data center, which is fully operational, we have various applications hosted there, websites, FTP portals, making it quite comprehensive. Essentially, it performs all the…

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"The comprehensive security for IaaS and PaaS cloud assets provides efficient security awareness to all the teams."
"The comprehensiveness of the CloudGuard’s threat prevention security is great, especially once they integrate Dome9 in the whole thing. That really ties the whole thing together, so you can tie your entire cloud environment together into one central location, which is nice. Previously, we had three or four different tools that we were trying to leverage to do the same stuff that we are able to do with CloudGuard."
"The tool's most valuable features are threat prevention and protection mechanisms."
"I value the comfort and the ability to receive proper insights almost hands-off."
"The new scanning function is a valuable feature that wasn't available until recently."
"The most valuable feature is posture management, which gives you complete visibility of all your assets in the cloud and allows you to do governance and compliance."
"Check Point CloudGuard Network Security is the best security software for protecting IT systems inside out."
"The installation process doesn't take very long."
"The tool's performance is good."
"The VPN connectivity feature is really nice."
"In our hospital, Sangfor NGAF works well for us in terms of ensuring confidentiality and availability, which are crucial in the healthcare industry."
"It enables us to not only detect but also prevent various types of incoming threats, allowing us to take appropriate corrective actions and exercise control over the network."
"The support from Sangfor NGAF here in Pakistan is great."
"The stability of Sangfor NGAF is good."
"I think Sangfor NGAF is more valuable than Cisco products because of its simplicity and ease of management. If I compare it with Palo Alto and Cisco, both are quite complex products. And if I compare it with FortiGate firewalls from Fortinet, I have also used all these products. Fortinet and Sangfor NGAF are similar products because the applications behind the application and policy layers are almost identical."
"The most valuable features are the WAN optimization, the internet access gateway (IAG), and the central console, which allows us to implement on their firewall."
 

Cons

"The costs are really high if you want the entire capabilities of the platform."
"Everything we do with Check Point must go through the vendor first, which is somewhat inconvenient. It would be easier to deal with Check Point directly, however, it depends on the vendor."
"At CPX, we heard that we can see all the things on the same platform. That is what we have been asking for, and hopefully, we are going to start seeing it this year."
"Currently, this solution is somewhat expensive."
"At the cost level, the solution is somewhat expensive."
"Some problems have been found in analysis at the time of execution, and local install revision agents have generated management incompatibility."
"The pricing is a bit very high."
"Zero touch removes any independence for configuring."
"Sangfor NGAF could improve by refining its application control policies, especially in addressing challenges with certain types of applications."
"Sangfor need greater exposer in the market because the market is mainly saturated by Fortinet. The user experience of Fortinet is quite different compared to NGAF. If we want to switch our users from Fortinet to NGAF, we have to convince them that the user experience will be much easier once once they start to use it."
"An area for improvement would be the number of ports defined on the box. In the next release, I would like them to develop their provisioning stage of enrolling end devices."
"The setup phase is quite complex."
"I think the GUI needs to be improved, there are a lot of areas where the panes do not make sense."
"The tool is expensive."
"The cost of licensing is very high compared to other firewalls available here. There should be improvements in hardware scalability, allowing for more storage and memory capacity."
"The solution has too many bugs and these slow down the implementation."
 

Pricing and Cost Advice

"As a partner and solution provider for the last fifteen years, I have distanced myself from specific numbers. However, customer trust in the product is evident due to its comprehensive protective capabilities."
"The licensing model has since transitioned to a cluster-based variant."
"Check Point CloudGuard Posture Management is expensive."
"Pricing-wise, it is pretty competitive. However, I would like to see more flexible licensing. There should be more of a consume what you need and true-up type of model."
"I do not know the exact price, but it is fairly priced. It is neither cheap nor costly."
"The price is fair for most of the customers. We don't find the price excessive. It's okay."
"The tool's pricing is moderate. Its licensing costs are yearly."
"Its price is very fair."
"If you know you have around 200+ computer users on your network, then the Sangfor NGAF 5200-F-I model would be the minimum recommended model for that amount of users. This model includes modules for packet filtering, deep packet inspection, malware scanning, DSCP filtration, and many other features."
"When it comes to the price of firewall solutions, Sangfor NGAF takes the cake."
"Sangfor is cheaper than competing vendors."
"If one is very cheap and ten is very expensive, I rate the tool's price as three out of ten."
"We purchased one year technical support and return to factory support, and we also purchased one-year technical support services. So those were additional."
"The solution has a TCO that is 32% to 50% less than Sophos, Fortinet, and SonicWall."
"The license of Sangfor NGAF can be purchased at different interval lengths, such as annually or three years. They offer a range of packages to choose from, such as combo or hybrid packages. We are using the complete solution package which includes IM, NGF and SSL VPN, and WAF."
"The pricing is reasonable."
report
Use our free recommendation engine to learn which Firewalls solutions are best for your needs.
918,957 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Outsourcing Company
16%
Construction Company
13%
Financial Services Firm
9%
Manufacturing Company
8%
Comms Service Provider
13%
Manufacturing Company
13%
Financial Services Firm
11%
Construction Company
7%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
By reviewers
Company SizeCount
Small Business133
Midsize Enterprise56
Large Enterprise146
By reviewers
Company SizeCount
Small Business15
Midsize Enterprise10
Large Enterprise10
 

Questions from the Community

What is your experience regarding pricing and costs for Check Point CloudGuard Network Security?
Since we use a unified standard for using policies and modules in Check Point Cloud Firewall (formerly CloudGuard Network Security), we can clearly plan which modules we need to activate on a parti...
What needs improvement with Check Point CloudGuard Network Security?
The main limitations of Check Point Cloud Firewall (formerly CloudGuard Network Security) are not in Check Point itself but in the cloud platforms on which it is deployed. Because not all clouds ha...
What is your primary use case for Check Point CloudGuard Network Security?
Check Point Cloud Firewall (formerly CloudGuard Network Security) is the main manager that provides network security in different forms in my organization. The primary task that Check Point solves ...
What is your experience regarding pricing and costs for Sangfor NGAF?
The licensing cost is quite high compared to other available firewalls in the market.
What needs improvement with Sangfor NGAF?
The cost of licensing is very high compared to other firewalls available here. There should be improvements in hardware scalability, allowing for more storage and memory capacity. Making the soluti...
What is your primary use case for Sangfor NGAF?
We are hosting applications over the platform, including websites and NAT traffic from our side. Because it's deployed in our data center, which is fully operational, we have various applications h...
 

Also Known As

CloudGuard IaaS, Check Point vSEC, CloudGuard IaaS, Check Point Virtual Systems, Check Point CloudGuard Network Security, Check Point CloudGuard CNAPP
Sangfor NGAF Firewall Platform
 

Overview

 

Sample Customers

Physicians Choice Laboratory Services, Helvetica Insurance
The Ministry of Science, Technology, and Innovation (Indonesia), Lawson, Inc. (Philippines), Universiti Sultan Zainal Abidin (Indonesia), TEK Automotive (Italy), etc.
Find out what your peers are saying about Check Point Cloud Firewall (formerly CloudGuard Network Security) vs. Sangfor NGAF and other solutions. Updated: September 2026.
918,957 professionals have used our research since 2012.